[ANN] Cure — Pure Go API-Shield based on YARA rules

[Nikita Loskutov]

Traditional Web Application Firewalls (WAF) are typically heavy enterprise monoliths dependent on slow ModSecurity rules. Cure addresses this bottleneck by functioning as a pure Go API-Shield powered by YARA rules, featuring an automated converter of enterprise OWASP Core Rule Set (CRS) v4 blocks directly into optimized signatures.

Github: https://github.com/cnaize/cure

Mode: Full
Body: ~10KB
Rules: 227 (OWASP CRS)
BenchmarkHTTPHandler/without_cure-8 8066433 428.3 ns/op 1008 B/op 7 allocs/op
BenchmarkHTTPHandler/with_cure-8 3615 1003092 ns/op 26172 B/op 128 allocs/op